CVE-2025-3765: SourceCodester Web-based Pharmacy Product Management System edit-photo.php unrestricted upload
A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of the file /edit-photo.php. The manipulation of the argument Avatar leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3765?
CVE-2025-3765 is classified as a critical vulnerability.
How do I fix CVE-2025-3765?
To fix CVE-2025-3765, implement proper input validation and restrict file uploads in the /edit-photo.php script.
What type of vulnerability is CVE-2025-3765?
CVE-2025-3765 is an unrestricted file upload vulnerability.
Which system is affected by CVE-2025-3765?
CVE-2025-3765 affects the SourceCodester Web-based Pharmacy Product Management System version 1.0.
What is the attack vector for CVE-2025-3765?
The attack vector for CVE-2025-3765 involves manipulating the Avatar argument to upload malicious files.